JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 240e:6a0:328:2:2::100

240e:6a0:328:2:2::100 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 12%: ?

12%

Important Note: Public IPv6 addresses may implement the SLAAC privacy extension. With this, the interface identifier is randomly generated. The SLAAC privacy extension also implements a time out, which is configurable, so that the IPv6 interface addresses will be discarded and a new interface identifier is generated.

ISP	Asia Pacific Network Information Centre
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	apnic.net
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 240e:6a0:328:2:2::100

Whois 240e:6a0:328:2:2::100

IP Abuse Reports for 240e:6a0:328:2:2::100:

This IP address has been reported a total of 17 times from 16 distinct sources. 240e:6a0:328:2:2::100 was first reported on September 24th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 DerLukas	2026-06-01 15:41:56 (2 days ago)		Port Scan
🇩🇪 DerLukas	2026-05-29 19:55:05 (5 days ago)		Port Scan
🇬🇧 openstrike.co.uk	2026-05-12 07:31:09 (3 weeks ago)	205 packets to ports 67 69 80 111 113 137 162 177 427 443 500 520 523 623 626 1434 1505 1604 1645 17 ... show more 205 packets to ports 67 69 80 111 113 137 162 177 427 443 500 520 523 623 626 1434 1505 1604 1645 1701 1812 1900 2123 2362 2424 2425 2427 2638 3283 3333 3478 3671 3702 3784 4050 4500 4800 5000 5001 5002 5004 5005 5006 5007 5008 5050 5061 5093 5351 5353 5405, etc. show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-03-13 21:39:33 (2 months ago)	RoutePulse CyberSecurity detection: ml scanning. Severity: warning. Distinct targets: 1. Distinct po ... show more RoutePulse CyberSecurity detection: ml scanning. Severity: warning. Distinct targets: 1. Distinct ports: 498. Flow count: 932. Bytes: 215820. Rule: Horizontal Port Scan. Direction: outbound show less	Port Scan
🇩🇪 ps-center	2026-03-05 04:51:35 (2 months ago)	MYH-W: TCP-Scanner. Port: 5900	Port Scan
🇺🇸 xmission.com	2026-02-21 04:38:23 (3 months ago)	Blocked by UFW (TCP on 1025) Source port: 49933 Packet length: 64 This report (for 240e:06a0:0328:0 ... show more Blocked by UFW (TCP on 1025) Source port: 49933 Packet length: 64 This report (for 240e:06a0:0328:0002:0002:0000:0000:0100) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 SysAdmin Dylan	2026-01-31 07:15:41 (4 months ago)	Port Scan detected from 240e:6a0:328:2:2::100 (Unknown). 11 hits in the last 106 seconds; Ports: * ... show more Port Scan detected from 240e:6a0:328:2:2::100 (Unknown). 11 hits in the last 106 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jan 31 08:15:21 kernel: Firewall: UDP6IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xxdd SRC=240e:06a0:0328:0002:0002:0000:0 show less	Port Scan
Anonymous	2025-12-03 18:44:33 (6 months ago)	2025-12-03T19:44:16.578609+01:00 postfix/smtpd[1868286]: improper command pipelining after CONNECT ... show more 2025-12-03T19:44:16.578609+01:00 postfix/smtpd[1868286]: improper command pipelining after CONNECT from unknown[240e:6a0:328:2:2::100]: EHLO\r\n 2025-12-03T19:44:24.312497+01:00 postfix/smtpd[1868286]: improper command pipelining after CONNECT from unknown[240e:6a0:328:2:2::100]: HELP\r\n 2025-12-03T19:44:31.956580+01:00 postfix/smtpd[1868286]: improper command pipelining after CONNECT from unknown[240e:6a0:328:2:2::100]: GET / HTTP/1.0\r\n\r\n show less	Email Spam
🇩🇪 becker-software.de	2025-11-14 14:19:41 (6 months ago)	2025-11-14T14:19:38.627382+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02 ... show more 2025-11-14T14:19:38.627382+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:3e:f2:cc:42:a5:8f:86:dd SRC=240e:06a0:0328:0002:0002:0000:0000:0100 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=64 TC=0 HOPLIMIT=234 FLOWLBL=0 PROTO=TCP SPT=42032 DPT=135 WINDOW=1024 RES=0x00 SYN URGP=0 2025-11-14T14:19:38.632733+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:3e:f2:cc:42:a5:8f:86:dd SRC=240e:06a0:0328:0002:0002:0000:0000:0100 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=64 TC=0 HOPLIMIT=234 FLOWLBL=0 PROTO=TCP SPT=42032 DPT=199 WINDOW=1024 RES=0x00 SYN URGP=0 2025-11-14T14:19:38.640951+00:00 becker-software kernel: [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:22:07:02:ee:3e:f2:cc:42:a5:8f:86:dd SRC=240e:06a0:0328:0002:0002:0000:0000:0100 DST=2a14:07c0:7000:0500:0077:0090:0016:0003 LEN=64 TC=0 HOPLIMIT=234 FLOWLBL=0 PROTO=TCP SPT=42032 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 2025-11-14T14:19:38.647951+00:00 becker-software kernel: [UFW B ... show less	Port Scan
🇩🇪 Admins@FBN	2025-11-05 08:15:08 (6 months ago)	FW-PortScan: Traffic Blocked srcport=53626 dstport=4444	Port Scan Brute-Force Exploited Host
🇨🇳 ThreatBook.io	2025-10-31 23:14:42 (7 months ago)	2025-10-31 02:43:53 / 2025-10-31 02:43:58 /favicon.ico	Web App Attack
🇯🇵 gomasy	2025-10-15 16:56:55 (7 months ago)	2025-10-16T01:56:55.274709+09:00 ssv01 postfix/submission/smtpd[2237168]: improper command pipelinin ... show more 2025-10-16T01:56:55.274709+09:00 ssv01 postfix/submission/smtpd[2237168]: improper command pipelining after CONNECT from unknown[240e:6a0:328:2:2::100]: EHLO\r\n ... show less	Brute-Force
Anonymous	2025-10-08 22:05:41 (7 months ago)	2025-10-09 00:05:39.247 [2088449] no host name found for IP address 240e:6a0:328:2:2::100 2025-10-09 ... show more 2025-10-09 00:05:39.247 [2088449] no host name found for IP address 240e:6a0:328:2:2::100 2025-10-09 00:05:39.247 [2088450] no host name found for IP address 240e:6a0:328:2:2::100 2025-10-09 00:05:39.386 [2088451] no host name found for IP address 240e:6a0:328:2:2::100 ... show less	Email Spam
🇳🇱 Mangelot Hosting	2025-10-02 05:28:28 (8 months ago)	(modsecurity) srv202 ModSecurity 240e:6a0:328:2:2::100 (Unknown): 5 in the last 3600 secs; Ports: ; ... show more (modsecurity) srv202 ModSecurity 240e:6a0:328:2:2::100 (Unknown): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 Murazaki	2025-09-26 22:01:24 (8 months ago)	_ 240e:6a0:328:2:2::100 - - [26/Sep/2025:03:29:43 +0200] "GET / HTTP/1.0" 503 190 "-" "-" "-" ...	Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 204.168.213.65

🇨🇳 120.48.124.176

🇮🇩 103.59.94.117

🇰🇿 91.229.149.158

🇹🇷 195.85.201.247

🇵🇷 154.64.212.138

🇺🇸 143.198.110.2

🇰🇷 115.68.208.117

🇺🇸 104.232.79.58

🇮🇳 103.251.31.26

🇷🇼 102.22.169.115

🇸🇬 94.231.206.10

🇰🇿 92.47.182.63

🇧🇪 74.125.47.24

🇮🇳 66.116.199.98

🇮🇳 64.227.161.198

🇮🇩 223.25.110.76

🇰🇬 212.241.29.24

🇧🇷 189.51.43.54

🇺🇿 185.213.230.24